Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
File:                     1794902224E111EF97BA8F42C4F9AE02.roa (raw, json)
Hash identifier:          Yq+GDOgPjYfjlCH3DOObesHj7a3fvejOrl/4IRRx/CI=
Subject key identifier:   C2:2B:84:C8:F2:67:81:CD:17:1E:E5:BD:13:B8:BF:D2:B5:62:2E:72
Certificate issuer:       /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
Certificate serial:       0CBE
Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:41:18 +0000
ROA not before:           Sat 26 Apr 2025 18:57:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138640
IP address blocks:        103.137.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3262 (0xcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4
        Validity
            Not Before: Apr 26 18:57:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a425de-f24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:83:6a:c6:8b:64:c9:73:ee:43:2c:b6:7c:
                    2e:4b:4d:e4:e0:b2:06:70:fa:fd:b6:42:cc:c1:de:
                    2b:b0:44:74:db:04:b3:9c:a6:ed:e8:d0:df:de:f4:
                    34:e1:6e:d4:db:eb:c8:53:b6:c0:8c:c1:bb:99:0a:
                    66:f0:d8:9a:99:52:2e:ee:91:71:87:30:aa:73:18:
                    6c:10:31:8e:41:e3:68:ac:71:c2:8f:4f:56:29:a8:
                    8b:d1:9e:76:7e:7b:b2:09:19:93:cb:30:e8:cb:48:
                    00:76:8f:8b:25:23:c7:02:ea:97:a6:70:84:e8:03:
                    02:3b:3c:d7:e1:95:3f:6b:b3:a8:0d:28:5a:dd:6a:
                    61:d6:b0:c8:fc:4a:d5:3e:0c:b3:c7:aa:84:5d:d2:
                    2d:0c:59:0d:71:fc:9b:bd:57:26:f4:8a:ce:9d:0a:
                    c3:77:c7:44:10:0c:ba:d7:41:e8:94:72:6c:a1:fd:
                    66:30:b2:6b:88:d0:1f:d3:b4:91:07:d4:c2:ee:cc:
                    d0:45:b1:0d:ac:5b:b8:17:2e:ca:07:7e:c3:fd:14:
                    f4:cb:cb:93:52:63:3f:53:7a:93:1e:74:56:67:e5:
                    1d:d5:4b:a2:4b:87:c3:d2:77:a6:10:aa:80:4d:41:
                    c0:bf:c4:b2:ce:4c:aa:96:49:39:09:d8:5d:a9:60:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2B:84:C8:F2:67:81:CD:17:1E:E5:BD:13:B8:BF:D2:B5:62:2E:72
            X509v3 Authority Key Identifier:
                keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/1794902224E111EF97BA8F42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:a6:ea:5b:fc:c6:de:51:92:c4:84:1d:f2:b7:29:70:3c:87:
         81:53:01:cb:1a:24:71:42:f7:cf:7f:7f:c6:31:3b:4d:cb:09:
         a0:b7:4e:91:ba:e8:ab:39:5b:bf:09:bb:50:29:e9:fa:80:5e:
         f5:91:0d:bc:9f:a8:2e:45:17:56:9b:22:e6:75:18:e7:70:73:
         fa:33:34:60:42:0f:0b:d4:c8:fe:03:fc:8b:5d:55:6d:62:d5:
         c1:a0:83:c8:68:21:2a:c3:6a:72:ee:0e:1e:ab:2d:f7:20:93:
         a9:c8:47:08:3a:6b:71:bd:09:36:ef:b1:16:2a:34:75:14:b5:
         39:62:59:69:5c:40:de:bf:97:af:c9:e2:25:d5:7c:60:d0:f4:
         f5:77:e1:f4:a4:88:ab:ce:fd:ed:19:dc:82:0f:67:f9:43:c6:
         ca:eb:bc:24:db:7c:c6:ea:8e:6c:d1:48:b4:4c:7d:05:4b:71:
         84:7b:3e:14:40:23:ad:f7:d6:44:c4:95:67:8e:fe:28:1f:e4:
         fd:72:7b:6a:87:9f:d8:ce:3d:e6:14:95:61:5d:0c:80:25:4b:
         06:33:c7:21:ab:d6:90:dd:81:36:65:14:d2:8b:70:b5:41:9c:
         87:de:33:87:96:a5:34:cd:dc:b4:61:db:92:7c:d1:3a:ee:22:
         af:36:80:5c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC
MzU1REFCRjQwHhcNMjUwNDI2MTg1NzQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjVkZS1mMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9+DasaLZMlz7kMstnwuS03k4LIGcPr9tkLMwd4rsER02wSznKbt6NDf3vQ0
4W7U2+vIU7bAjMG7mQpm8NiamVIu7pFxhzCqcxhsEDGOQeNorHHCj09WKaiL0Z52
fnuyCRmTyzDoy0gAdo+LJSPHAuqXpnCE6AMCOzzX4ZU/a7OoDSha3Wph1rDI/ErV
Pgyzx6qEXdItDFkNcfybvVcm9IrOnQrDd8dEEAy610HolHJsof1mMLJriNAf07SR
B9TC7szQRbENrFu4Fy7KB37D/RT0y8uTUmM/U3qTHnRWZ+Ud1UuiS4fD0nemEKqA
TUHAv8Syzkyqlkk5CdhdqWC6BwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMIrhMjy
Z4HNFx7lvRO4v9K1Yi5yMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD
QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTcyQUIvRDcxNzM0RkUwQ0E0MTFFQTg0ODQxQjNFQzRGOUFFMDIvMTc5NDkwMjIy
NEUxMTFFRjk3QkE4RjQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4mhMA0GCSqGSIb3DQEBCwUAA4IBAQC7pupb/MbeUZLEhB3ytylw
PIeBUwHLGiRxQvfPf3/GMTtNywmgt06RuuirOVu/CbtQKen6gF71kQ28n6guRRdW
myLmdRjncHP6MzRgQg8L1Mj+A/yLXVVtYtXBoIPIaCEqw2py7g4eqy33IJOpyEcI
OmtxvQk277EWKjR1FLU5YllpXEDev5evyeIl1Xxg0PT1d+H0pIirzv3tGdyCD2f5
Q8bK67wk23zG6o5s0Ui0TH0FS3GEez4UQCOt99ZExJVnjv4oH+T9cntqh5/Yzj3m
FJVhXQyAJUsGM8chq9aQ3YE2ZRTSi3C1QZyH3jOHlqU0zdy0YduSfNE67iKvNoBc
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:11 2026 by rpki-client